{"id":74586,"date":"2026-09-04T17:17:02","date_gmt":"2026-09-04T20:17:02","guid":{"rendered":"https:\/\/a3aengenharia.com\/?post_type=articles&#038;p=74586"},"modified":"2026-09-04T17:17:02","modified_gmt":"2026-09-04T20:17:02","slug":"logical-network-vlans-ip-routing-segmentation-design","status":"publish","type":"articles","link":"https:\/\/a3aengenharia.com\/en-us\/content\/technical-articles\/logical-network-vlans-ip-routing-segmentation-design\/","title":{"rendered":"Logical Network: VLANs, IP, Routing, Segmentation and Design"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Logical network<\/strong> is the functional architecture that determines how users, devices, systems and applications communicate over a network infrastructure. It organizes IP addressing, subnets, VLANs, broadcast domains, routing, communication policies, services such as DNS and DHCP, traffic prioritization, availability mechanisms, management, monitoring and documentation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A network may be physically well installed and still have poor security, difficult operations, addressing conflicts, unnecessary traffic, inconsistent routes and outages caused by poorly planned logical architecture. For this reason, the logical network needs to be designed as a system, with requirements, diagrams, matrices, configuration standards and validation criteria.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is a logical network?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The logical network describes <strong>how communication is organized<\/strong>, regardless of where each cable is physically installed. Two devices connected to the same switch may belong to different logical networks; likewise, devices installed on different floors or in different buildings may belong to the same logical domain when the architecture requires it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This organization is built using mechanisms such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>IPv4 and IPv6 addresses;<\/li><li>network masks and prefixes;<\/li><li>VLANs;<\/li><li>trunks and access interfaces;<\/li><li>routing between subnets;<\/li><li>gateways;<\/li><li>VRFs where required;<\/li><li>ACLs and firewall policies;<\/li><li>DNS, DHCP and NTP;<\/li><li>QoS;<\/li><li>authentication and network access control;<\/li><li>management systems, logs and telemetry;<\/li><li>documentation and source of truth.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The purpose of logical design is to turn business and system requirements into a predictable architecture. The administrative network, guest Wi-Fi, servers, IP video surveillance, access control, building automation, IoT and equipment management do not need \u2014 and in many cases should not \u2014 share the same communication policies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logical network vs. physical network: where does one end and the other begin?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>physical network<\/strong> materializes connectivity: cables, fiber, racks, patch panels, fiber distribution frames, switches, routers, access points, pathways, power and other components. The <strong>logical network<\/strong> uses these resources to build communication domains, addressing, segmentation and policies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The division is conceptual, not operational. Logical decisions affect the physical infrastructure and vice versa.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Decision<\/td><td>Logical impact<\/td><td>Physical impact<\/td><\/tr><tr><td>Create a separate video surveillance network<\/td><td>VLAN, subnet, gateway and policies<\/td><td>Ports, switches, PoE and uplinks<\/td><\/tr><tr><td>Increase Wi-Fi density<\/td><td>SSIDs, VLANs, authentication and QoS<\/td><td>APs, cabling, PoE and access capacity<\/td><\/tr><tr><td>Gateway redundancy<\/td><td>Protocol and virtual addresses<\/td><td>Two devices, links and power<\/td><\/tr><tr><td>Segregate OT\/IoT<\/td><td>Zones, ACLs\/firewall and routes<\/td><td>Switch distribution and possible dedicated pathways<\/td><\/tr><tr><td>Faster backbone<\/td><td>Aggregation and routing capacity<\/td><td>Optics, fibers, transceivers and ports<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">A logical architecture should not assume that the physical layer has unlimited capacity. Likewise, installing high-capacity physical infrastructure does not solve logical design problems.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Layer 2 and Layer 3: the boundary that organizes the network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Much of a corporate network architecture is determined by where the Layer 2 domain ends and Layer 3 routing begins.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Layer 2: switching and broadcast domains<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">At Layer 2, switches forward Ethernet frames based on MAC addresses. VLANs make it possible to create multiple logical domains over the same switching infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Very large L2 domains can increase the impact of loops, broadcasts, spanning-tree failures and topology changes. This does not mean there is a universal correct VLAN size; the architecture should consider function, criticality, mobility, operations and failure domain.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Layer 3: subnets and routing<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When communication needs to cross subnets, routing comes into play. The gateway may be on a Layer 3 switch, router, firewall or another platform compatible with the architecture.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The decision about where to route affects:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>traffic path;<\/li><li>policy enforcement;<\/li><li>latency;<\/li><li>availability;<\/li><li>failure domain;<\/li><li>observability;<\/li><li>scalability;<\/li><li>troubleshooting.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In modern networks, not all inter-VLAN traffic should necessarily follow the same path. Critical systems may require firewall inspection, while high-volume internal flows may follow a different design, provided security and operational policies remain satisfied.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">IP addressing plan: the foundation of a manageable network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IP addressing should not be a sequence of ranges chosen as new equipment appears. A structured plan makes it possible to identify function, location, criticality and operational responsibility.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Private IPv4 and block organization<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In internal IPv4 networks, the private blocks defined by RFC 1918 are widely used. The design should reserve and subdivide addresses so growth does not create overlaps or unnecessary fragmentation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Good decisions include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>reserve blocks by site or region;<\/li><li>separate networks by function;<\/li><li>leave coherent growth space between subnets;<\/li><li>avoid overlap with partner networks, VPNs and known acquisitions;<\/li><li>document gateways, DHCP ranges, reservations and static addresses;<\/li><li>enable route summarization where the architecture justifies it.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Subnet sizing<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A subnet should be sized according to the number of devices, expected growth, broadcast behavior and operating model. Creating excessively large blocks \u201cso IP addresses never run out\u201d can increase the failure domain and waste addressing structure; blocks that are too small lead to frequent renumbering.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Static address, DHCP reservation and dynamic assignment<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">There is no single correct method for all assets. Infrastructure equipment, appliances and management interfaces often need predictable addresses. Users and mobile devices are normally well suited to DHCP. Cameras, controllers and IoT devices may use static addresses or reservations according to the organization\u2019s operational standard.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What matters is that the strategy be documented and reproducible.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IPv6 needs to be part of the plan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">IPv6 should not be treated merely as \u201cmore addresses.\u201d It changes addressing, discovery, routing, policies, DNS, monitoring and security. Even organizations that still operate mainly in IPv4 should avoid decisions that make future adoption unnecessarily difficult.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">VLANs: logical separation over shared infrastructure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">VLANs make it possible to create independent Layer 2 domains over common infrastructure. They are an organization and segmentation tool, but <strong>they do not, by themselves, constitute a complete security policy<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A VLAN matrix may include:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Function<\/td><td>Example policy<\/td><\/tr><tr><td>Corporate users<\/td><td>access to internal services and internet according to profile<\/td><\/tr><tr><td>Guests<\/td><td>internet without access to the corporate network<\/td><\/tr><tr><td>Servers<\/td><td>access controlled by application and source<\/td><\/tr><tr><td>IP video surveillance<\/td><td>communication with VMS, NTP, DNS and authorized workstations<\/td><\/tr><tr><td>Access control<\/td><td>communication with servers and required integrations<\/td><\/tr><tr><td>IoT\/automation<\/td><td>access limited to brokers, servers and specific services<\/td><\/tr><tr><td>Management<\/td><td>access only from authorized workstations and teams<\/td><\/tr><tr><td>IP voice<\/td><td>signaling and media with appropriate QoS policies<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Access ports and trunks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An access port normally associates the end device with a specific VLAN. Trunks carry multiple VLANs between devices where needed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design should define which VLANs are allowed on each trunk, avoiding the practice of carrying every VLAN across the entire network without need. Reducing the logical surface of trunks simplifies operations, troubleshooting and change control.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Native VLAN and configuration inconsistencies<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Configuration differences between the two ends of a link can cause unexpected behavior, traffic leakage or outages. The configuration standard should define native-VLAN handling, allowed VLANs and policies for unused ports according to the adopted platform.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Segmentation: function, risk and criticality<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Segmentation is not just creating VLANs. Complete segmentation defines <strong>who may communicate with whom, through which services, under which conditions and where that policy is enforced<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A sound architecture begins with a communication matrix. For each source and destination, required flows should be known: protocol, port, direction, criticality, justification and system owner.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Flat network vs. segmented network<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A flat network tends to grow without clear boundaries. This makes troubleshooting harder, increases lateral exposure and makes changes riskier.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With segmentation, failures and policies can be contained by domain. However, overly granular segmentation without governance can create hundreds of rules that are difficult to maintain. The design should balance security, operations and complexity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Least privilege applied to the network<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The principle is to allow only the communications that are necessary. A camera needs access to what is required for the VMS and infrastructure services, not necessarily to the entire user network. A guest network needs internet access, not access to internal servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This requires verifiable policies, not just VLAN names that suggest isolation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Routing between networks and sites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Routing determines how prefixes are reached. Small networks may use static routes; larger or redundant networks may require dynamic protocols.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The choice should consider:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>number of networks and sites;<\/li><li>convergence requirements;<\/li><li>redundancy;<\/li><li>operations team capability;<\/li><li>summarization;<\/li><li>path policies;<\/li><li>integration with WAN, internet and cloud;<\/li><li>observability and troubleshooting.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Gateway and high availability<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If every device in a VLAN depends on a single gateway, that component may become a single point of failure. Critical architectures evaluate redundancy of gateways, equipment, links, power supplies and paths.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Redundancy should be tested. Two switches installed in a rack do not guarantee continuity if they share the same power source, the same uplink or a configuration that prevents proper convergence.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Return paths<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Many failures that appear to be \u201cfirewall\u201d or \u201capplication\u201d problems are caused by inconsistent return paths. Troubleshooting should verify the path in both directions, especially in environments with multiple firewalls, WAN links, VPNs or load balancers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">DNS, DHCP, NTP and infrastructure services<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The logical network depends on services that often do not appear on the physical diagram but are essential to operations.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DHCP<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DHCP can distribute address, gateway, DNS and other parameters. The design should define scopes, exclusions, reservations, lease times and relays when the server is not on the same subnet as the client.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pool capacity needs to match the actual client density, especially on Wi-Fi and temporary networks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DNS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNS is a dependency for virtually every modern application. A resolution failure may be perceived by the user as \u201cthe internet is down\u201d even when IP connectivity is available.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Architecture and troubleshooting should consider servers, zones, forwarders, redundancy, internal\/external resolution and paths to the service.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">NTP<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Time synchronization is essential for log correlation, authentication, certificates, security events, video surveillance and auditing. Devices with inconsistent clocks make incident investigation and event validation more difficult.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IPAM and source of truth<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Isolated spreadsheets may work on small networks, but they become fragile when multiple teams change VLANs, prefixes, addresses and equipment. IPAM and source-of-truth tools help link addresses, networks, sites, equipment and interfaces to controlled records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The tool does not fix bad data: governance and a change process are still required.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Switching, STP and link aggregation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Where redundant Layer 2 paths exist, loops must be controlled. STP, RSTP or MSTP may be part of that strategy according to the platform and architecture.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design should define root, priorities, domains, edge protection and expected failure behavior; leaving every parameter at its default transfers architecture decisions to the equipment\u2019s automatic behavior.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LACP and port channels make it possible to aggregate links when platforms are compatible and the design is appropriate. Aggregation should not automatically be interpreted as a linear sum of throughput for a single flow, and distribution depends on the platform\u2019s hashing algorithm.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">QoS: prioritization does not create bandwidth<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">QoS organizes traffic handling when resources are contested. It can classify, mark, queue, police or prioritize flows according to policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Voice, real-time video and delay-sensitive applications may require different treatment from bulk transfers. However, QoS does not fix permanently undersized uplinks. When capacity is structurally insufficient, the design needs to correct capacity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A consistent policy also defines the <strong>trust boundary<\/strong>: where received marking is trusted, rewritten or created.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Wi-Fi is part of the logical network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SSIDs need to be associated with VLANs, authentication, addressing, policies and services. Creating too many SSIDs without need increases operational complexity and can consume airtime with management traffic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design should define, for example:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>corporate SSID;<\/li><li>guests;<\/li><li>managed devices;<\/li><li>IoT where applicable;<\/li><li>authentication;<\/li><li>associated VLAN or policy;<\/li><li>DNS\/DHCP;<\/li><li>permitted access;<\/li><li>integration with NAC or directory;<\/li><li>roaming behavior.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The RF layer and logical layer are different, but they need to be coordinated.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">IP video surveillance, access control, IoT and automation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IP security and automation systems have their own traffic flows. Treating them all as \u201cjust another network port\u201d often produces overly permissive policies.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IP video surveillance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cameras need to reach the VMS, storage where applicable, NTP, DNS and authorized workstations. Analytics, updates and cloud services may add other flows. The matrix should reflect the real architecture.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Access control<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Controllers and servers may depend on directories, databases, visitor systems, elevators, video surveillance and corporate integrations. Separating the network without mapping these dependencies causes deployment blockages.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IoT and automation<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">IoT devices often have update cycles, authentication and exposure characteristics different from corporate notebooks. Segregation and specific policies reduce the communication surface and simplify inventory and monitoring.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Equipment management and security plan<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The management network should be treated as its own zone. Administrative interfaces for switches, routers, firewalls, controllers and UPS systems do not need to be accessible to every user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A management standard may include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>dedicated addressing;<\/li><li>access only from administrative workstations or networks;<\/li><li>SSH\/HTTPS instead of insecure protocols;<\/li><li>centralized AAA where applicable;<\/li><li>SNMPv3 for monitoring where supported;<\/li><li>central syslog;<\/li><li>NTP;<\/li><li>configuration backups;<\/li><li>version control;<\/li><li>change records;<\/li><li>protection of unused ports and services.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">802.1X, NAC and network access control<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A VLAN does not identify who connected a device. In environments that require stronger control, 802.1X and NAC solutions can authenticate users or equipment and apply policies based on identity, posture or profile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The architecture should account for dependencies such as RADIUS, directory, certificates, fallback for devices without a supplicant and behavior during authentication-service outages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NAC should not be deployed merely by enabling a feature on a switch. It is an operational change that requires inventory, policy, pilot deployment, controlled exceptions and a migration plan.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Multi-site logical networks, WAN and cloud<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Where multiple sites exist, the logical network needs to define how sites exchange routes, access central services and continue operating when links fail.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Design questions include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>unique address blocks by site;<\/li><li>prefix summarization;<\/li><li>primary and alternate routes;<\/li><li>local or centralized internet;<\/li><li>VPN, private WAN or SD-WAN;<\/li><li>DNS, identity and application dependencies;<\/li><li>cloud access;<\/li><li>internet egress policy;<\/li><li>failover behavior;<\/li><li>end-to-end observability.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Having two carriers does not guarantee redundancy if both circuits depend on the same physical route, CPE, power source or edge configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Baseline of an existing logical network<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">Migrating a network without knowing its actual VLANs, prefixes, routes, policies and dependencies turns the change into discovery in production.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Technical Due Diligence organizes the baseline of the existing infrastructure and identifies documentation gaps, risks and limitations before redesign.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/levantamento-e-diagnostico\/due-diligence\/\">Learn about the Technical Due Diligence service<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Before redesigning a brownfield network, it is necessary to understand what is actually in production. The logical baseline should record configurations and behavior, not just equipment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The survey may include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>VLANs and their uses;<\/li><li>IPv4\/IPv6 prefixes;<\/li><li>gateways;<\/li><li>routes and protocols;<\/li><li>trunks;<\/li><li>STP;<\/li><li>port channels;<\/li><li>DHCP and DNS;<\/li><li>firewall rules and ACLs;<\/li><li>SSIDs and policies;<\/li><li>management networks;<\/li><li>application dependencies;<\/li><li>interface and uplink utilization;<\/li><li>errors, drops and events;<\/li><li>redundancy and failover behavior;<\/li><li>existing documentation and gaps.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Changing a network without this baseline increases the risk of removing an invisible dependency or interrupting an undocumented flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logical Network Design: from requirement to executable design<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">VLANs, addressing and routes need to come from an architecture, not from isolated configurations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logical Network Design transforms communication, availability and security requirements into diagrams, an IP plan, matrices, configuration standards, migration and acceptance criteria.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/planejamento\/projeto-de-rede-logica-e-redes-corporativas\/\">Learn about the Logical Network and Corporate Network Design service<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">A logical design should convert requirements into documents that enable implementation and validation.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Requirements and systems matrix<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Identify users, applications, devices, sites, flows, criticality, security, availability and growth.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Target architecture<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Defines L2\/L3 domains, segmentation, gateways, routing, services, management and policies.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Addressing plan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Organizes prefixes, gateways, DHCP, reservations, infrastructure networks and growth.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. VLAN and communication matrix<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Links each segment to its purpose and specifies permitted flows between zones.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Configuration standard<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Defines switching, trunking, STP, LACP, routing, AAA, NTP, SNMP, logging, hardening and naming principles.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Implementation and migration plan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Turns the architecture into change waves, windows, dependencies, tests and rollback.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Test and acceptance plan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Determines how to prove that segmentation, services, routing, availability and policies work according to the design.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logical-network migration without turning change into an incident<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In brownfield environments, implementation needs to preserve existing services while the architecture changes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A controlled migration uses:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>approved baseline;<\/li><li>dependency list;<\/li><li>backups;<\/li><li>prepared and reviewed configuration;<\/li><li>change windows;<\/li><li>communication plan;<\/li><li>go\/no-go criteria;<\/li><li>pre- and post-change tests;<\/li><li>executable rollback;<\/li><li>record of what changed.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Large changes may be divided by building, VLAN, user group or system. The criterion should reduce the impact domain and simplify troubleshooting.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Observability: how do you know whether the logical network is healthy?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A network should not be considered healthy merely because it responds to ping. Observability combines data from different layers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Useful indicators include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>equipment and link availability;<\/li><li>interface utilization;<\/li><li>errors and drops;<\/li><li>latency, jitter and loss;<\/li><li>STP events and flaps;<\/li><li>route changes;<\/li><li>CPU and memory utilization;<\/li><li>DHCP pools;<\/li><li>DNS failures;<\/li><li>authentications and rejections;<\/li><li>firewall logs;<\/li><li>PoE events;<\/li><li>Wi-Fi quality;<\/li><li>critical-service availability.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">SNMP, syslog, telemetry, flows and APIs may contribute according to platform capability. The goal is to establish a baseline and detect deviations, not merely accumulate metrics.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logical-network documentation and source of truth<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Documentation should allow another team to understand the network without depending on the memory of the administrator who configured it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A documentation package may contain:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Document<\/td><td>Content<\/td><\/tr><tr><td>Logical diagram<\/td><td>sites, devices, links, zones and main services<\/td><\/tr><tr><td>IP plan<\/td><td>prefixes, gateways, reservations, DHCP and purpose<\/td><\/tr><tr><td>VLAN matrix<\/td><td>IDs, names, subnets, sites and function<\/td><\/tr><tr><td>Communication matrix<\/td><td>source, destination, service, direction and justification<\/td><\/tr><tr><td>Designed routing table<\/td><td>prefixes, protocol, summarization and paths<\/td><\/tr><tr><td>Configuration standard<\/td><td>conventions and minimum controls<\/td><\/tr><tr><td>Inventory<\/td><td>assets, interfaces, versions and location<\/td><\/tr><tr><td>Management plan<\/td><td>AAA, NTP, SNMP, syslog and backups<\/td><\/tr><tr><td>Test plan<\/td><td>scenarios, expected results and evidence<\/td><\/tr><tr><td>Logical As-Built<\/td><td>configuration and architecture actually accepted<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Logical documentation and actual configuration need to remain synchronized. When a change is executed without updating the source of truth, the next troubleshooting effort starts with incorrect information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logical-network testing and commissioning<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">Acceptance should prove not only that permitted flows work, but also that prohibited flows remain blocked and redundancy converges according to the requirement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Commissioning integrates VLAN, routing, service, policy, failover, performance and documentation testing before operational handover.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/implementacao\/comissionamento\/\">Learn about the Engineering Commissioning service<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Acceptance should not be limited to \u201cthe internet works.\u201d Each requirement should have corresponding evidence.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">VLAN and segmentation tests<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Verify port association, trunks, allowed VLANs, gateways and isolation between networks. In addition to positive tests, there should be <strong>negative tests<\/strong>: proving that prohibited flows really do not pass.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DHCP, DNS and NTP<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Validate address assignment, options, relay, name resolution and time synchronization from the intended networks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Routing<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Validate primary and alternate routes, summarization, paths and behavior during link or equipment loss when redundancy was a requirement.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Security and access<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Test ACLs, firewall, AAA, 802.1X\/NAC and access to the management plane according to scope.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Performance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Where the design has performance targets, test throughput, latency, jitter, loss and behavior under load using a methodology compatible with the requirement. The test should distinguish a network limitation from an endpoint or application limitation.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Failover and recovery<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If the design promises high availability, failure should be simulated in a controlled manner. Recording convergence time and service behavior is more useful than merely confirming that \u201cthere are two links.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Recurring failures that indicate logical-architecture problems<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some symptoms appear as isolated incidents but reveal design problems:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Symptom<\/td><td>Logical hypotheses to investigate<\/td><\/tr><tr><td>Duplicate IP<\/td><td>manual addressing without governance, inconsistent DHCP\/reservation<\/td><\/tr><tr><td>Intermittent access between networks<\/td><td>asymmetric route, stateful firewall, gateway or convergence<\/td><\/tr><tr><td>Excessive broadcast<\/td><td>large L2 domain, loop, faulty device<\/td><\/tr><tr><td>Users without IP addresses<\/td><td>DHCP pool, relay, VLAN or path to server<\/td><\/tr><tr><td>Name does not resolve<\/td><td>DNS, route, ACL, service or client configuration<\/td><\/tr><tr><td>Slow inter-VLAN traffic<\/td><td>uplink, firewall path, CPU, QoS or policy<\/td><\/tr><tr><td>Outage after a change<\/td><td>unmapped dependency, trunk, STP, route or rule<\/td><\/tr><tr><td>Camera reaches an unintended network<\/td><td>incomplete segmentation or permissive policy<\/td><\/tr><tr><td>Management inaccessible during failure<\/td><td>dependency on the same infrastructure being recovered<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Effective troubleshooting starts from evidence and compares the observed state with the expected architecture.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cisco and other platforms: technology should follow the architecture<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cisco Catalyst, Meraki, firewalls, ISE and other platforms can implement the switching, VLANs, routing, NAC, telemetry and policies described in this article. Other manufacturers can provide equivalent functions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design should not begin with the equipment name. Requirements, capacity, protocols, policies, interfaces, availability and operations are defined first. It is then possible to evaluate which platforms demonstrably meet them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In Cisco environments already deployed, specialized consulting can be useful for auditing topology, configuration, licensing, lifecycle, security and modernization opportunities without turning the design into a catalog of models.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">When should the logical network be reviewed?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A review is indicated when there is disorderly growth, VLANs without a standard, overlapping IP ranges, firewall rules without traceability, flat networks, recurring incidents, expansion of video surveillance\/IoT, new sites, cloud adoption, corporate Wi-Fi, core replacement, WAN changes or lack of reliable documentation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is also advisable to review the architecture before a major acquisition. Buying larger switches without correcting design, segmentation or availability may simply expand an inadequate architecture.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Technical checklist for evaluating a logical network<\/h2>\n\n\n\n<ol class=\"wp-block-list\"><li>Is there a current and controlled addressing plan?<\/li><li>Is the purpose of each VLAN documented?<\/li><li>Do L2 domains have coherent boundaries?<\/li><li>Are gateways and routing paths known?<\/li><li>Does a communication matrix between zones exist?<\/li><li>Do DHCP, DNS and NTP have redundancy and documented dependencies?<\/li><li>Is the management network protected?<\/li><li>Do STP and LACP have an intentional design or are they simply left at defaults?<\/li><li>Are there policies for AAA, logs, monitoring and configuration backup?<\/li><li>Do Wi-Fi, video surveillance, access control and IoT have coherent segmentation?<\/li><li>Does the multi-site architecture avoid overlapping IP ranges?<\/li><li>Has redundancy been tested under failure conditions?<\/li><li>Is there a performance baseline?<\/li><li>Do changes have records and rollback plans?<\/li><li>Does the logical As-Built match the actual deployed state?<\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Final considerations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A well-designed logical network turns physical infrastructure into a controlled communications platform. IP, VLANs, routing, segmentation, services, policies, availability and observability need to be treated as parts of the same architecture.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The expected result is not merely connectivity, but a network that is <strong>manageable, documented, secure, scalable and verifiable<\/strong>. When baseline, design, implementation, testing and source of truth remain integrated, changes no longer depend on improvisation and operations become more predictable.<\/p>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Technical references<\/summary>\n<p class=\"wp-block-paragraph\">[1] IETF. RFC 1918 \u2014 Address Allocation for Private Internets. Available at: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc1918\">https:\/\/www.rfc-editor.org\/rfc\/rfc1918<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[2] IETF. RFC 8200 \u2014 Internet Protocol, Version 6 (IPv6) Specification. Available at: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc8200\">https:\/\/www.rfc-editor.org\/rfc\/rfc8200<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[3] IETF. RFC 2131 \u2014 Dynamic Host Configuration Protocol. Available at: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc2131\">https:\/\/www.rfc-editor.org\/rfc\/rfc2131<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[4] IETF. RFC 1034 \u2014 Domain Names \u2014 Concepts and Facilities. Available at: <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc1034\">https:\/\/www.rfc-editor.org\/rfc\/rfc1034<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[5] IEEE 802.1 Working Group \u2014 Bridging and management standards, including VLANs and local-area networking technologies. Available at: <a href=\"https:\/\/1.ieee802.org\/\">https:\/\/1.ieee802.org\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[6] IEEE 802.3 Ethernet Working Group. Available at: <a href=\"https:\/\/www.ieee802.org\/3\/\">https:\/\/www.ieee802.org\/3\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[7] NIST. SP 800-207 \u2014 Zero Trust Architecture. Available at: <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/207\/final\">https:\/\/csrc.nist.gov\/pubs\/sp\/800\/207\/final<\/a><\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Frequently asked questions<\/summary>\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-o-que-rede-l-gica-239f27c7\"><strong class=\"schema-faq-question\">What is a logical network?<\/strong> <p class=\"schema-faq-answer\">It is the functional organization of communications over the physical infrastructure, including IP addressing, VLANs, subnets, routing, segmentation, services, policies, management and documentation.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-qual-a-diferen-a-entre-vlan-e-sub-rede-ip-cbaf849e\"><strong class=\"schema-faq-question\">What is the difference between a VLAN and an IP subnet?<\/strong> <p class=\"schema-faq-answer\">A VLAN creates a Layer 2 logical domain. A subnet organizes addresses and communication at Layer 3. In common architectures there is an association between a VLAN and a subnet, but they are concepts from different layers.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-vlan-suficiente-para-garantir-seguran-a-d4d61652\"><strong class=\"schema-faq-question\">Is a VLAN enough to guarantee security?<\/strong> <p class=\"schema-faq-answer\">No. A VLAN separates Layer 2 domains, but security also depends on routing policies, firewalls, ACLs, authentication, management and control of flows between segments.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-o-que-deve-constar-em-um-projeto-de-rede-l-gica-00543a2c\"><strong class=\"schema-faq-question\">What should a logical network design include?<\/strong> <p class=\"schema-faq-answer\">Logical architecture, IP plan, VLAN matrix, communication matrix, routing, DNS\/DHCP\/NTP services, security policies, management, documentation, migration plan, and test and acceptance criteria.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-como-saber-se-uma-rede-l-gica-precisa-ser-redese-edf40bc1\"><strong class=\"schema-faq-question\">How do you know whether a logical network needs to be redesigned?<\/strong> <p class=\"schema-faq-answer\">Signs include flat networks, IP conflicts, VLANs without standards, undocumented rules, recurring incidents, difficulty expanding, overlap between sites, poor observability and absence of reliable As-Built documentation.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-por-que-testar-failover-no-comissionamento-52a96ca7\"><strong class=\"schema-faq-question\">Why test failover during commissioning?<\/strong> <p class=\"schema-faq-answer\">Because having redundant equipment or links does not prove availability. Controlled testing verifies convergence, routes, gateways, policies and the actual service impact during a failure.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-rede-l-gica-deve-incluir-cftv-e-controle-de-aces-5ee766e0\"><strong class=\"schema-faq-question\">Should the logical network include video surveillance and access control?<\/strong> <p class=\"schema-faq-answer\">Yes. IP systems need addressing, segmentation, communication policies, DNS\/NTP where applicable, management and documentation like any other connected system.<\/p><\/div><\/div>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Complementary technical materials<\/summary>\n<h4 class=\"wp-block-heading\">Related solutions<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/solucoes\/engenharia-de-redes-e-telecomunicacoes\/conectividade-e-rede-logica\/\">Connectivity and Logical Network<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/solucoes\/engenharia-de-redes-e-telecomunicacoes\/cabeamento-estruturado\/\">Structured Cabling<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Related services<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/planejamento\/projeto-de-rede-logica-e-redes-corporativas\/\">Logical Network and Corporate Network Design<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/levantamento-e-diagnostico\/due-diligence\/\">Technical Engineering Due Diligence<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/planejamento\/projeto-de-telecomunicacoes\/\">Telecommunications Design<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/servicos-transversais\/consultoria-cisco\/\">Cisco Consulting<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/contratacao-integrada\/engenharia-do-proprietario\/\">Owner\u2019s Engineering<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/servicos-transversais\/ensaios-e-testes\/\">Technical Testing<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/implementacao\/comissionamento\/\">Engineering Commissioning<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/implementacao\/as-built-documentacao-tecnica-encerramento\/\">Engineering As-Built<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Main content on this topic<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/projeto-de-rede-guia-de-implementacao-de-redes\/\">Network Design: stages, architecture and technical documentation<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/infraestrutura-de-rede-guia-completo\/\">Network Infrastructure: complete guide<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/rede-fisica-vs-rede-logica-diferencas-aplicacoes-melhores-praticas-2\/\">Physical Network vs. Logical Network: differences, integration and troubleshooting<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Related technical content<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/rede-cabeada\/\">Wired Network: Ethernet, architecture, performance and design<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/power-over-ethernet-poe-classes-potencia-dimensionamento\/\">Power over Ethernet (PoE): standards, classes, power and sizing<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/troubleshooting-de-rede-como-diagnosticar-e-resolver-problemas\/\">Network Troubleshooting: layered diagnosis, root cause and correction<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/como-resolver-problemas-de-estabilidade-e-desempenho-de-rede\/\">Network Stability and Performance: diagnosis, causes and correction<\/a><\/li><\/ul>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Learn how a logical network organizes IP, VLANs, subnets, routing, segmentation, services, policies, availability, documentation and testing in corporate networks.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"template":"","meta":{"_a3a_global_related_solutions":[],"_a3a_global_related_services":[],"_a3a_global_related_materials":[],"_a3a_post_lang":"en-us","_a3a_translation_group_id":"7c756dad-05c9-445c-8d35-89fe3fa3c9b2","_a3a_i18n_canonical_slug":"logical-network-vlans-ip-routing-segmentation-design"},"categories":[],"segments":[],"mercados":[],"etapas":[],"class_list":["post-74586","articles","type-articles","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/74586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles"}],"about":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/types\/articles"}],"author":[{"embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/74586\/revisions"}],"predecessor-version":[{"id":74592,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/74586\/revisions\/74592"}],"wp:attachment":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/media?parent=74586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/categories?post=74586"},{"taxonomy":"segments","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/segments?post=74586"},{"taxonomy":"mercados","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/mercados?post=74586"},{"taxonomy":"etapas","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/etapas?post=74586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}